General

  • Target

    996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e

  • Size

    1.9MB

  • MD5

    fae16f4150fbb4256a5b4448c090e38c

  • SHA1

    c4d831f56c577aeeecd0ff35353a1fe4513a6a50

  • SHA256

    996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e

  • SHA512

    3835e6e50a0bb8a915ba5310af3426464f8a00d507e98f07482986ad7574e93bb0fe1eb261c4712213c954488edcaf09b4d15417a45a8c509001ed03dd549af4

  • SSDEEP

    49152:heeKdme4AFDw2Y9K9V9JtCaXT5XJCVU4I1:JYDpY9CpD5ZCxI1

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e
    .exe windows:6 windows x64 arch:x64

    b8c6c89c8acf9c2a890251d2092dce0b


    Headers

    Imports

    Sections